water-noaa-tides

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs include a direct download of an executable Node script (https://fittings.sh/skill/call.mjs) and explicit instructions to curl and run it — a high‑risk pattern for malware distribution even if the rest are benign API endpoints.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes a paid API flow that requires signing an on‑chain/payment authorization with a private key and holding USDC on Base. It shows an example exporting FITTINGS_PRIVATE_KEY, explains signing a quoted payment (402 response) and mentions @x402/evm/@x402/core — i.e., specific crypto/payment tooling and wallet signing. This is a direct financial execution capability (crypto payment signing), not a generic API caller.